THENA says critical PHP vulnerabilities do not affect its platform
THENA issued a clarification in response to the disclosure of critical PHP runtime vulnerabilities (CVE-2026-109618 and CVE-2026-109619, dubbed "php2shell"), stating that the platform does not use PHP, so the flaws have no impact on THENA. The team advised users to stay safe against phishing and related attempts.
Key points:
- The statement follows the public disclosure of two critical, actively-scrutinized PHP RCE vulnerabilities.
- THENA says its stack does not include PHP, so its platform is unaffected.
- No action required from THENA users beyond normal caution.
Thena
